Agentic trading: which brokers let an AI agent trade for you
Brokers now let AI agents read your account and place trades. They differ on who actually places the order: the AI on its own, the AI after you confirm, or only you. Here are all 16 official broker connectors we track, grouped that way, with paper accounts, cost, our Safety score and a setup guide where we have one. Checked 2026-11-03.
≈200,000Robinhood customers have opened Agentic Trading Accounts, driving over $1.6 billion in notional trading volume (Robinhood Q3 2026 results, 2026-10-27)
$250M+held by Robinhood customers in agentic accounts (Robinhood Q3 2026 earnings call, 2026-10-28)
75,000+stocks, options and ETFs an AI can trade at Interactive Brokers without approving each order, from a dedicated AI Partition (IBKR Autonomous Trading, launched Oct 21, 2026) (Interactive Brokers press release, 2026-10-21)
Every broker connector, by who places the order
| Broker connector | Who places the order | Paper or demo | Cost | Safety | Guide |
|---|---|---|---|---|---|
| Alpaca MCP Server | AI trades directly Places orders directly | live and paper (ALPACA_PAPER_TRADE defaults to true/paper; paper with simulated $100K) | free paper Trading API account with Basic IEX data is enough to start | Safety 68% | Setup guide |
| Longbridge MCP | AI trades directly Can place orders | live trading tools (place/modify/cancel) | Trading, account, fundamentals and news APIs are free | Safety 68% | |
| NinjaTrader MCP | AI trades directly Agent may trade without asking, depending on your client | Demo (simulated) and Live endpoints | NinjaTrader plans: Free ($0/mo), Monthly $99/mo or Lifetime $1,499, plus per-side commissions | Safety 58% | |
| moomoo MCP | AI trades directly Trade scope submits and cancels orders | Simulated (paper) trading is authorized separately from live trading | No extra fee for trading via the moomoo API (same as the app) | Safety 58% | Setup guide |
| Tradier MCP Server | AI trades directly No separate order-confirmation step documented | live and paper (PAPER_TRADING flag with your paper token) | any Tradier plan works, including the free Lite plan | Safety 50% | Setup guide |
| B2Trader MCP (B2PRIME) | AI trades directly two hosted MCP endpoints on your broker's B2Trader terminal domain: /mcp-read-only (23 tools, OAuth scope mcp:read; trading tools are not part of it, … | live: the full-access endpoint places real orders on your B2Trader account | no separate MCP fee is stated | Safety 40% (partial) | |
| Public Hosted MCP Server | AI trades directly Public says trades may run without your input on each one | live (real money) | no extra fee for MCP access with a Public account | Safety 28% (partial) | Setup guide |
| tastytrade MCP Server | You confirm each order Single-use confirmation token from a dry run | live by default (connects to production unless TASTYTRADE_ENV=sandbox) | tastytrade: $0 stock/ETF commissions, $1 per contract to open options ($10 max per leg) | Safety 100% | Setup guide |
| eToro MCP Connectors | You confirm each order every action is proposed for your review and approval | live account | no separate fee stated by eToro | Safety 90% | |
| TradeStation MCP | You confirm each order Explicit confirmation before every order | live | not billed by TradeStation (access to the AI app comes from your AI provider) | Safety 86% (partial) | Setup guide |
| CCXT MCP Server open-source connector to many crypto exchanges, not a broker | Approval optional writes are previewed and confirmed by default on live accounts (confirm: always | live | never), checked against a per-order USD cap you set … | live and sandbox/testnet accounts (per exchange) | free, open source (MIT) | Safety 85% | |
| Axi MCP (MT5) | Approval optional Approval is your AI client's prompt | live and demo MT5 accounts | no Axi fee mentioned | Safety 75% | |
| Interactive Brokers AI Integration (MCP) | Approval optional You approve each order, unless you opt in to IBKR Autonomous Trading (eligible clients) | live account | no additional cost (per IBKR's AI integrations page) | Safety 71% (partial) | Setup guide |
| Robinhood Trading MCP | Approval optional Trade-approvals toggle (off by default) | live, from a dedicated MCP account | No fee listed for external MCP agents | Safety 71% (partial) | Setup guide |
| cTrader AI Agent Connect (MCP) | Approval optional an approvals toggle in the local server settings ('Require confirmation for trading operations') asks before each trade, otherwise confirmation … | live: with trading enabled, the agent places, modifies and closes real orders on the connected cTrader account | free: included with your cTrader account (you need a supported AI client) | Safety 64% (partial) | |
| Webull Cloud MCP Server | You place the order Creates order instructions you confirm in the app | live: creates order instructions (stocks, options, futures, crypto, event contracts, algo) that you confirm in the Webull app/desktop | Webull says there is no extra charge for API access | Safety 88% (partial) |
Accounts built for agents
Two brokers keep autonomous trading away from the rest of your money:
- Robinhood: trades only in a dedicated MCP account (agent gets read access to all your Robinhood accounts) (listing, checked 2026-11-03)
- Interactive Brokers: IBKR Autonomous Trading (announced Oct 21, 2026) lets eligible clients authorize connected AI to execute supported orders without approving each one, only inside a dedicated AI Partition funded with cash from the parent account (listing, checked 2026-11-03)
Before you let an agent trade
- Start on paper where the broker offers it, and read every order the agent would have placed.
- Give it its own account holding only what it may lose. Robinhood's agent account and IBKR's AI Partition exist for exactly this.
- Use the narrowest permissions: read-only first, trading only when you're ready, never anything that can move money out.
- Keep confirmations on while you test, even where the broker lets you switch them off.
- Put hard limits outside the AI: maximum order size, daily loss and allowed symbols, enforced in code. TAS Guard does this for free and sits between the agent and the broker.
- Check what it can read: some connectors let the agent see all your accounts even when it can trade only one.
FAQ
What is agentic trading?
Letting an AI agent, such as Claude, ChatGPT or Grok, read your brokerage account and place trades through the broker's official connector (usually an MCP server). Brokers differ on one thing that matters most: whether the AI can place an order on its own or only proposes it for you to confirm.
Which brokers let an AI trade without approving each order?
In our listings: Alpaca, Longbridge, NinjaTrader, moomoo, Tradier, B2Trader, Public let the AI place orders directly. CCXT, Axi, Interactive Brokers, Robinhood, cTrader make approval optional. Robinhood and Interactive Brokers keep autonomous trading inside a separate, separately funded agent account or partition.
Which brokers make you confirm every AI order?
tastytrade, eToro, TradeStation. Webull goes further: the AI only drafts the order and you place it yourself.
Is agentic trading safe?
It's as safe as the limits around the agent. Start on paper where the broker offers it, fund a separate agent account with only what it may lose, and put hard limits outside the AI (order size, daily loss, allowed symbols) instead of rules in the prompt. An AI can misread an instruction; a limit in code can't be talked out of.
Go deeper
- Best broker for AI agents: grouped by order approval, paper trading and markets
- Who places the order: broker MCP order gating research
- Safety controls of every broker MCP server
- Step-by-step setup guides
- Broker APIs compared with Alpaca and market data API pricing
- TAS Guard: hard limits for any agent that trades